You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@river.apache.org by Peter Firmstone <pe...@zeus.net.au> on 2014/07/10 10:01:33 UTC

JEP 187

The attached code shares the same motivations as JEP 187 and may help 
establish a baseline.

One more thing we're looking into (for a later release) is trusted class 
lists to avoid deserialization attacks.

https://issues.apache.org/jira/browse/RIVER-362

http://www.ibm.com/developerworks/java/library/se-lookahead/index.html

Regards,

Peter.